Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: qqm6co8eaAt1crRMDv3e7VhRdbLRxzC32DUARZVWmr4=
Subject key identifier: 25:3D:87:C8:3E:71:71:73:B8:45:D9:D9:02:E6:56:BA:49:80:F5:B5
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 0194BC04D7048390528154B6C00754A8826C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: q8aY2Sk6X9FE7us0j/VpzbcBmEr4D84jJdva3TlniZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:04:83:90:52:81:54:b6:c0:07:54:a8:82:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=253d87c83e717173b845d9d902e656ba4980f5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:05:15:2f:d7:e7:04:e6:3a:4d:30:e0:63:
bd:77:71:f5:af:49:c9:27:6d:2d:d8:24:8f:63:b9:
0a:61:7e:5a:96:3e:86:19:2e:30:94:2c:02:ac:c2:
95:8b:e5:ce:86:05:5d:ad:64:c8:aa:e7:8c:f8:f9:
8e:f6:91:68:e2:38:5f:34:6d:a3:12:af:f6:bf:bd:
1a:74:55:5c:cb:24:f8:ae:7d:8e:c1:78:db:bd:5a:
d2:6f:64:9a:93:7a:37:f1:df:1c:a0:54:d3:84:a3:
c1:68:bf:da:d2:de:3b:5b:d7:14:64:51:86:e2:ef:
15:f2:26:9e:bd:37:7c:c6:e4:26:25:09:33:5e:b9:
9f:1d:94:09:14:29:00:cc:8a:86:dd:e9:df:c7:79:
86:74:dd:7c:de:bf:8f:ee:a6:24:a7:d1:87:29:11:
06:a7:63:2d:f1:10:d8:bd:cc:a6:f2:36:f3:7d:af:
8c:40:1a:58:c2:21:98:95:24:48:81:ae:d4:4d:6a:
5a:38:05:50:02:c2:42:ab:29:c8:bd:4f:2a:df:77:
6e:77:b5:90:84:c0:d0:d4:60:7b:33:1f:4c:8c:80:
07:be:85:09:24:c4:d9:e8:e6:51:bd:ae:e7:8b:33:
d7:37:20:9a:75:1f:2e:ba:43:75:f9:0c:b1:ac:8b:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:87:C8:3E:71:71:73:B8:45:D9:D9:02:E6:56:BA:49:80:F5:B5
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:6e:f7:f7:0a:3f:68:0c:a1:d5:44:a7:74:83:c2:08:1f:
5a:f7:a6:0e:ba:e2:a5:5a:9b:72:ee:eb:19:cd:17:f1:2b:a3:
bb:6d:77:b1:a2:e6:d4:f0:09:b7:c2:b0:d5:61:d9:f4:1e:be:
9f:02:35:fb:2a:12:7d:55:76:25:46:7a:82:a4:cc:da:7a:d7:
d8:ed:d5:4f:a0:de:27:6e:f1:aa:41:b4:3c:58:f0:a6:22:4f:
fb:d0:9a:81:d5:f8:fb:c9:86:5f:ff:1d:82:5f:ed:81:90:06:
20:7a:b9:8c:fd:a1:a7:42:a6:a2:a7:b3:d5:4c:a2:90:e5:67:
22:3f:3f:e6:be:c6:7b:3e:ef:30:e8:5c:80:b5:c0:9c:dc:7f:
83:12:df:12:e0:aa:ca:b0:89:fa:13:4a:f9:78:d7:0d:18:6e:
86:8d:03:94:cc:25:d2:88:9d:18:34:1e:fa:80:db:30:fa:ef:
4c:7d:a4:cf:cd:77:6f:22:5d:c7:9e:8d:65:9f:ea:ed:4e:69:
0e:e3:4c:8c:d2:a5:b9:18:37:e4:ff:99:9d:2e:47:06:de:8c:
50:e7:e2:9a:0f:a9:64:c2:3e:f2:14:e7:2b:13:1f:9e:67:90:
e3:b8:eb:a4:f1:3b:57:8f:de:34:3d:e9:f0:97:82:ce:56:07:
ca:5b:29:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNcEg5BSgVS2wAdUqIJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0
NGNhMWEwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
EygyNTNkODdjODNlNzE3MTczYjg0NWQ5ZDkwMmU2NTZiYTQ5ODBmNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHAFFS/X5wTmOk0w4GO9d3H1r0nJ
J20t2CSPY7kKYX5alj6GGS4wlCwCrMKVi+XOhgVdrWTIqueM+PmO9pFo4jhfNG2j
Eq/2v70adFVcyyT4rn2OwXjbvVrSb2Sak3o38d8coFTThKPBaL/a0t47W9cUZFGG
4u8V8iaevTd8xuQmJQkzXrmfHZQJFCkAzIqG3enfx3mGdN183r+P7qYkp9GHKREG
p2Mt8RDYvcym8jbzfa+MQBpYwiGYlSRIga7UTWpaOAVQAsJCqynIvU8q33dud7WQ
hMDQ1GB7Mx9MjIAHvoUJJMTZ6OZRva7nizPXNyCadR8uukN1+QyxrIubYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU9h8g+cXFzuEXZ2QLmVrpJgPW1MB8GA1UdIwQY
MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt
OTYzYjI1ZmEzMDY4LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4
LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhRu9/cK
P2gModVEp3SDwggfWvemDrripVqbcu7rGc0X8Suju213saLm1PAJt8Kw1WHZ9B6+
nwI1+yoSfVV2JUZ6gqTM2nrX2O3VT6DeJ27xqkG0PFjwpiJP+9CagdX4+8mGX/8d
gl/tgZAGIHq5jP2hp0Kmoqez1UyikOVnIj8/5r7Gez7vMOhcgLXAnNx/gxLfEuCq
yrCJ+hNK+XjXDRhuho0DlMwl0oidGDQe+oDbMPrvTH2kz813byJdx56NZZ/q7U5p
DuNMjNKluRg35P+ZnS5HBt6MUOfimg+pZMI+8hTnKxMfnmeQ47jrpPE7V4/eND3p
8JeCzlYHylspTg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:38 2025 by rpki-client